Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: SANroOLIm3cJXmCR7OG4w3MXSoIxr4XdWm/9qdb2CW0=
Subject key identifier: 49:1E:83:8E:38:6D:5D:6D:35:70:3F:BF:CD:D4:9B:1B:80:50:E6:7A
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019A725CBD275969EF5ECD70248501F9699D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0DD6
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: HozJ7RWGDIaxuubzpU1k1ihVJ6owEwgmNjRSTQ9IJNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bd:27:59:69:ef:5e:cd:70:24:85:01:f9:69:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=491e838e386d5d6d35703fbfcdd49b1b8050e67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:26:54:fe:41:33:87:c4:54:3b:b5:89:8d:
09:43:ac:95:ba:a4:ee:f5:14:a1:8d:3a:9d:30:9b:
e4:a5:aa:b4:1d:ca:df:c0:b6:67:46:af:6a:3a:72:
7f:45:8f:51:18:af:51:b1:d8:39:a8:8d:c8:cf:22:
a7:2f:f4:b0:bd:de:ae:63:e8:5c:23:40:4f:eb:ec:
cb:03:9b:3d:0b:87:12:6d:b5:15:2a:dd:87:69:53:
09:f9:3f:35:d0:0a:d5:6b:61:74:9f:5c:79:73:09:
cc:51:2e:4c:7d:18:a1:75:d4:be:85:80:c6:40:e2:
b3:8c:8f:92:3d:b7:34:de:b4:b5:99:66:5e:e8:1e:
6c:e1:da:87:46:9e:94:21:d2:39:dd:9e:cf:23:ba:
9c:76:d9:00:77:5f:4c:40:91:37:d0:7b:6c:73:db:
e4:f8:bf:56:82:6c:19:3a:29:90:7d:3e:bd:6e:1a:
45:61:c4:fa:7b:68:80:62:5a:70:f6:e7:33:b7:bc:
b1:5f:78:59:ad:29:e9:99:37:38:de:22:fb:90:26:
9e:ff:9a:b9:b0:5e:0e:c5:09:21:24:89:0c:a2:f4:
47:08:12:e0:b8:f3:55:37:e1:66:fe:86:d2:68:5b:
13:65:c2:09:2d:1a:e0:5e:a8:08:9c:43:62:e2:30:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1E:83:8E:38:6D:5D:6D:35:70:3F:BF:CD:D4:9B:1B:80:50:E6:7A
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b3:58:da:47:46:f2:ab:6e:62:cc:b7:65:a6:53:d2:86:62:
84:9b:77:87:2c:6c:d2:40:c8:4d:f3:6a:f7:e2:9f:cf:fd:9d:
54:8f:a3:bb:6c:d6:23:06:aa:2c:75:b8:8a:90:51:c7:eb:62:
7f:fb:e0:27:e4:77:e7:b3:bb:c5:1b:22:a0:25:14:9d:d2:de:
44:d3:d8:9e:7f:cf:cf:5b:a5:76:f7:81:25:2a:6f:e8:c5:01:
41:82:d9:50:f1:a6:c4:de:48:b4:ed:c9:92:9c:ae:e1:68:6b:
b7:60:8b:70:40:69:6f:5c:e6:15:71:f1:9e:4c:4a:f5:c3:4c:
f7:ff:a3:f5:8e:ae:0d:e6:08:c1:01:40:8e:7b:97:0b:2c:cf:
d0:e2:78:eb:68:d6:2e:94:b4:6b:4d:3a:57:77:ea:2d:a8:24:
d2:46:7e:05:ef:63:f1:91:62:da:98:88:bf:a1:f3:0b:06:ab:
e9:8a:52:c9:cc:e8:db:ae:85:bd:bc:c8:28:de:2c:47:b4:c5:
e4:ed:0b:35:b8:6d:d1:cc:ad:cf:f8:40:66:ff:4e:62:dd:fc:
eb:44:be:47:79:db:b5:53:c3:53:e3:a5:eb:8a:56:d2:ce:44:
0e:83:4c:07:b6:14:f0:b3:40:7f:26:3b:24:46:3f:1c:83:ca:
a8:c7:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:38 2025 by rpki-client